fe59cc40cfb24029ca48639f45496d12d6dfb2f8454f1b4fcd1ffc885a2fd74b | Triage

Sharing

Copy URL Twitter E-mail

General

Target

fe59cc40cfb24029ca48639f45496d12d6dfb2f8454f1b4fcd1ffc885a2fd74b
Size

74KB
MD5

a904a615f17be20dfb5975c1adc06f82
SHA1

65ee3b83b4009a46dc078359319ca67d6fecf013
SHA256

fe59cc40cfb24029ca48639f45496d12d6dfb2f8454f1b4fcd1ffc885a2fd74b
SHA512

ca46336021fd9365b64169926cd0e4834c7c17c28900d241f8db1a193bbae8ca9c266e45f02632013f1e6d9e43ff089600343fca12a6525e2ac92b5bb0abc297
SSDEEP

1536:sIPV3OjofGSIifMxMCf2g89Q0jpGiJoVCPNb2R8:fPgr2hCW/jpGiJokNI

Score

8^/10

upx

Malware Config

Signatures

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Files

fe59cc40cfb24029ca48639f45496d12d6dfb2f8454f1b4fcd1ffc885a2fd74b
.exe windows x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

UPX0
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

UPX1
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ap0x
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE